./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2536162244
<...>
Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts.
execve("./syz-executor2536162244", ["./syz-executor2536162244"], 0x7ffc9b79cab0 /* 10 vars */) = 0
brk(NULL) = 0x55556c297000
brk(0x55556c297d00) = 0x55556c297d00
arch_prctl(ARCH_SET_FS, 0x55556c297380) = 0
set_tid_address(0x55556c297650) = 5230
set_robust_list(0x55556c297660, 24) = 0
rseq(0x55556c297ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2536162244", 4096) = 28
getrandom("\x9a\x7f\x04\x30\x34\x46\x57\x1c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556c297d00
brk(0x55556c2b8d00) = 0x55556c2b8d00
brk(0x55556c2b9000) = 0x55556c2b9000
mprotect(0x7f3f00957000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached
, child_tidptr=0x55556c297650) = 5231
[pid 5231] set_robust_list(0x55556c297660, 24) = 0
[pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5231] setpgid(0, 0) = 0
[pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5231] write(3, "1000", 4) = 4
[pid 5231] close(3) = 0
executing program
[pid 5231] write(1, "executing program\n", 18) = 18
[pid 5231] memfd_create("syzkaller", 0) = 3
[pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3ef8400000
[pid 5231] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x20\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\xf4\x00\x00\x00\xf4\x00\x00\x00\x93\x57\x07\x25\x51\x37\x2d\x04\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 4194304) = 4194304
[pid 5231] munmap(0x7f3ef8400000, 138412032) = 0
[pid 5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5231] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5231] close(3) = 0
[pid 5231] close(4) = 0
[pid 5231] mkdir("./file0", 0777) = 0
[ 79.504595][ T5231] loop0: detected capacity change from 0 to 8192
[ 79.543044][ T5231] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 79.556671][ T5231] INFO: trying to register non-static key.
[ 79.562471][ T5231] The code is fine but needs lockdep annotation, or maybe
[ 79.569561][ T5231] you didn't initialize this object before use?
[ 79.575784][ T5231] turning off the locking correctness validator.
[ 79.582096][ T5231] CPU: 0 UID: 0 PID: 5231 Comm: syz-executor253 Not tainted 6.11.0-rc6-syzkaller #0
[ 79.591455][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 79.601502][ T5231] Call Trace:
[ 79.604770][ T5231]
[ 79.607685][ T5231] dump_stack_lvl+0x241/0x360
[ 79.612381][ T5231] ? __pfx_dump_stack_lvl+0x10/0x10
[ 79.617573][ T5231] ? __pfx__printk+0x10/0x10
[ 79.622153][ T5231] ? preempt_count_add+0x93/0x190
[ 79.627172][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.632805][ T5231] ? __is_module_percpu_address+0x3a1/0x420
[ 79.638699][ T5231] ? __module_address+0x32/0x500
[ 79.643637][ T5231] assign_lock_key+0x238/0x270
[ 79.648394][ T5231] ? __pfx_assign_lock_key+0x10/0x10
[ 79.653668][ T5231] ? __lock_acquire+0x137a/0x2040
[ 79.658695][ T5231] register_lock_class+0x1cf/0x980
[ 79.663807][ T5231] ? __pfx_register_lock_class+0x10/0x10
[ 79.669465][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.675100][ T5231] __lock_acquire+0xf0/0x2040
[ 79.679951][ T5231] ? validate_chain+0x11e/0x5900
[ 79.684879][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.690513][ T5231] ? validate_chain+0x11e/0x5900
[ 79.695448][ T5231] lock_acquire+0x1ed/0x550
[ 79.699947][ T5231] ? mark_as_free_ex+0x3e/0x390
[ 79.704804][ T5231] ? __pfx_lock_acquire+0x10/0x10
[ 79.709822][ T5231] ? __pfx_validate_chain+0x10/0x10
[ 79.715008][ T5231] ? __pfx___might_resched+0x10/0x10
[ 79.720289][ T5231] ? __pfx_validate_chain+0x10/0x10
[ 79.725478][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.731110][ T5231] ? validate_chain+0x11e/0x5900
[ 79.736035][ T5231] ? kasan_save_track+0x51/0x80
[ 79.740877][ T5231] ? kasan_save_free_info+0x40/0x50
[ 79.746076][ T5231] down_write_nested+0xa2/0x220
[ 79.750929][ T5231] ? mark_as_free_ex+0x3e/0x390
[ 79.755783][ T5231] ? __pfx_down_write_nested+0x10/0x10
[ 79.761232][ T5231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 79.767293][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.772926][ T5231] ? look_up_lock_class+0x77/0x160
[ 79.778026][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.783658][ T5231] ? register_lock_class+0x102/0x980
[ 79.788942][ T5231] mark_as_free_ex+0x3e/0x390
[ 79.793612][ T5231] ? __pfx_register_lock_class+0x10/0x10
[ 79.799242][ T5231] run_unpack+0x7f3/0xda0
[ 79.803595][ T5231] run_unpack_ex+0x14b/0x7f0
[ 79.808188][ T5231] ? __pfx_run_unpack_ex+0x10/0x10
[ 79.813294][ T5231] ? ni_enum_attr_ex+0x2f9/0x6e0
[ 79.818226][ T5231] ? __pfx_ni_enum_attr_ex+0x10/0x10
[ 79.823504][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.829137][ T5231] ni_delete_all+0x2d9/0x9a0
[ 79.833725][ T5231] ? __pfx_ni_delete_all+0x10/0x10
[ 79.838823][ T5231] ? _raw_spin_lock_irq+0xdf/0x120
[ 79.843940][ T5231] ? _raw_spin_unlock_irq+0x23/0x50
[ 79.849137][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.854769][ T5231] ? lockdep_hardirqs_on+0x99/0x150
[ 79.859969][ T5231] ni_clear+0x28e/0x4b0
[ 79.864118][ T5231] ? clear_inode+0x108/0x160
[ 79.868705][ T5231] ? __pfx_ntfs_evict_inode+0x10/0x10
[ 79.874078][ T5231] evict+0x534/0x950
[ 79.878317][ T5231] ? __pfx_evict+0x10/0x10
[ 79.882730][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.888360][ T5231] ? _raw_spin_unlock+0x28/0x50
[ 79.893210][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.898840][ T5231] ? iput+0x6ed/0x930
[ 79.902822][ T5231] ntfs_loadlog_and_replay+0x2e8/0x4f0
[ 79.908287][ T5231] ? __pfx_ntfs_loadlog_and_replay+0x10/0x10
[ 79.914269][ T5231] ? _raw_spin_unlock+0x28/0x50
[ 79.919120][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.924750][ T5231] ? iput+0x6ed/0x930
[ 79.928733][ T5231] ntfs_fill_super+0x2c38/0x4730
[ 79.933698][ T5231] ? __pfx_ntfs_fill_super+0x10/0x10
[ 79.938980][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.944615][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.950245][ T5231] ? sb_set_blocksize+0x98/0xf0
[ 79.955092][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.960720][ T5231] ? setup_bdev_super+0x4e6/0x5d0
[ 79.965739][ T5231] get_tree_bdev+0x3f9/0x570
[ 79.970324][ T5231] ? __pfx_ntfs_fill_super+0x10/0x10
[ 79.975610][ T5231] ? __pfx_get_tree_bdev+0x10/0x10
[ 79.980713][ T5231] ? apparmor_capable+0x13b/0x1b0
[ 79.985735][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.991369][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 79.997002][ T5231] vfs_get_tree+0x92/0x2b0
[ 80.001418][ T5231] do_new_mount+0x2be/0xb40
[ 80.005916][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.011553][ T5231] ? __pfx_do_new_mount+0x10/0x10
[ 80.016597][ T5231] __se_sys_mount+0x2d6/0x3c0
[ 80.021293][ T5231] ? __pfx___se_sys_mount+0x10/0x10
[ 80.026492][ T5231] ? do_syscall_64+0x100/0x230
[ 80.031253][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.036884][ T5231] ? __x64_sys_mount+0x20/0xc0
[ 80.041644][ T5231] do_syscall_64+0xf3/0x230
[ 80.046145][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.052038][ T5231] RIP: 0033:0x7f3f008c4daa
[ 80.056478][ T5231] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.076073][ T5231] RSP: 002b:00007ffda8f23918 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 80.084481][ T5231] RAX: ffffffffffffffda RBX: 00007ffda8f23930 RCX: 00007f3f008c4daa
[ 80.092447][ T5231] RDX: 0000000020020b80 RSI: 0000000020020bc0 RDI: 00007ffda8f23930
[ 80.100406][ T5231] RBP: 0000000000000004 R08: 00007ffda8f23970 R09: 0000000000020b83
[ 80.108377][ T5231] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[ 80.116340][ T5231] R13: 00007ffda8f23970 R14: 0000000000000003 R15: 0000000000400000
[ 80.124316][ T5231]
[ 80.128556][ T5231] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI
[ 80.141351][ T5231] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[ 80.149745][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: syz-executor253 Not tainted 6.11.0-rc6-syzkaller #0
[ 80.159101][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 80.169142][ T5231] RIP: 0010:wnd_is_used+0x58/0x520
[ 80.174258][ T5231] Code: 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 a0 11 13 ff 49 8b 1f 48 8d 6b 14 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 7b 04 00 00 0f b6 6d 00 4c 8d 75 03 bf 3d
[ 80.193857][ T5231] RSP: 0018:ffffc90009257288 EFLAGS: 00010213
[ 80.199914][ T5231] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000
[ 80.207876][ T5231] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88802ebf41f8
[ 80.215839][ T5231] RBP: 0000000000000014 R08: ffff88802ebf420f R09: 1ffff11005d7e841
[ 80.223803][ T5231] R10: dffffc0000000000 R11: ffffed1005d7e842 R12: 0000000000000003
[ 80.231766][ T5231] R13: 0000000000000002 R14: 0000000000000002 R15: ffff88802ebf41f8
[ 80.239730][ T5231] FS: 000055556c297380(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[ 80.248655][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.255229][ T5231] CR2: 00007f20b8995ed8 CR3: 000000007757a000 CR4: 0000000000350ef0
[ 80.263196][ T5231] Call Trace:
[ 80.266464][ T5231]
[ 80.269381][ T5231] ? __die_body+0x88/0xe0
[ 80.273718][ T5231] ? die_addr+0x108/0x140
[ 80.278051][ T5231] ? exc_general_protection+0x3dd/0x5d0
[ 80.283611][ T5231] ? asm_exc_general_protection+0x26/0x30
[ 80.289334][ T5231] ? wnd_is_used+0x58/0x520
[ 80.293834][ T5231] ? wnd_is_used+0x2b/0x520
[ 80.298334][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.303966][ T5231] ? register_lock_class+0x102/0x980
[ 80.309251][ T5231] mark_as_free_ex+0x53/0x390
[ 80.313918][ T5231] ? __pfx_register_lock_class+0x10/0x10
[ 80.319554][ T5231] run_unpack+0x7f3/0xda0
[ 80.323898][ T5231] run_unpack_ex+0x14b/0x7f0
[ 80.328540][ T5231] ? __pfx_run_unpack_ex+0x10/0x10
[ 80.333649][ T5231] ? ni_enum_attr_ex+0x2f9/0x6e0
[ 80.338587][ T5231] ? __pfx_ni_enum_attr_ex+0x10/0x10
[ 80.343872][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.349509][ T5231] ni_delete_all+0x2d9/0x9a0
[ 80.354096][ T5231] ? __pfx_ni_delete_all+0x10/0x10
[ 80.359196][ T5231] ? _raw_spin_lock_irq+0xdf/0x120
[ 80.364312][ T5231] ? _raw_spin_unlock_irq+0x23/0x50
[ 80.369518][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.375153][ T5231] ? lockdep_hardirqs_on+0x99/0x150
[ 80.380356][ T5231] ni_clear+0x28e/0x4b0
[ 80.384503][ T5231] ? clear_inode+0x108/0x160
[ 80.389090][ T5231] ? __pfx_ntfs_evict_inode+0x10/0x10
[ 80.394468][ T5231] evict+0x534/0x950
[ 80.398367][ T5231] ? __pfx_evict+0x10/0x10
[ 80.402777][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.408410][ T5231] ? _raw_spin_unlock+0x28/0x50
[ 80.413263][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.418935][ T5231] ? iput+0x6ed/0x930
[ 80.422922][ T5231] ntfs_loadlog_and_replay+0x2e8/0x4f0
[ 80.428391][ T5231] ? __pfx_ntfs_loadlog_and_replay+0x10/0x10
[ 80.434372][ T5231] ? _raw_spin_unlock+0x28/0x50
[ 80.439222][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.444866][ T5231] ? iput+0x6ed/0x930
[ 80.448851][ T5231] ntfs_fill_super+0x2c38/0x4730
[ 80.453815][ T5231] ? __pfx_ntfs_fill_super+0x10/0x10
[ 80.459102][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.464736][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.470368][ T5231] ? sb_set_blocksize+0x98/0xf0
[ 80.475211][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.480846][ T5231] ? setup_bdev_super+0x4e6/0x5d0
[ 80.485870][ T5231] get_tree_bdev+0x3f9/0x570
[ 80.490459][ T5231] ? __pfx_ntfs_fill_super+0x10/0x10
[ 80.495744][ T5231] ? __pfx_get_tree_bdev+0x10/0x10
[ 80.500882][ T5231] ? apparmor_capable+0x13b/0x1b0
[ 80.505918][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.511550][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.517193][ T5231] vfs_get_tree+0x92/0x2b0
[ 80.521631][ T5231] do_new_mount+0x2be/0xb40
[ 80.526128][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.531764][ T5231] ? __pfx_do_new_mount+0x10/0x10
[ 80.536786][ T5231] __se_sys_mount+0x2d6/0x3c0
[ 80.541462][ T5231] ? __pfx___se_sys_mount+0x10/0x10
[ 80.546654][ T5231] ? do_syscall_64+0x100/0x230
[ 80.551411][ T5231] ? srso_alias_return_thunk+0x5/0xfbef5
[ 80.557039][ T5231] ? __x64_sys_mount+0x20/0xc0
[ 80.561800][ T5231] do_syscall_64+0xf3/0x230
[ 80.566298][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 80.572188][ T5231] RIP: 0033:0x7f3f008c4daa
[ 80.576592][ T5231] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 80.596192][ T5231] RSP: 002b:00007ffda8f23918 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 80.604688][ T5231] RAX: ffffffffffffffda RBX: 00007ffda8f23930 RCX: 00007f3f008c4daa
[ 80.612653][ T5231] RDX: 0000000020020b80 RSI: 0000000020020bc0 RDI: 00007ffda8f23930
[ 80.620614][ T5231] RBP: 0000000000000004 R08: 00007ffda8f23970 R09: 0000000000020b83
[ 80.628577][ T5231] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000
[ 80.636542][ T5231] R13: 00007ffda8f23970 R14: 0000000000000003 R15: 0000000000400000
[ 80.644516][ T5231]
[ 80.647519][ T5231] Modules linked in:
[ 80.652487][ T5231] ---[ end trace 0000000000000000 ]---
[ 80.657960][ T5231] RIP: 0010:wnd_is_used+0x58/0x520
[ 80.663124][ T5231] Code: 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 a0 11 13 ff 49 8b 1f 48 8d 6b 14 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 7b 04 00 00 0f b6 6d 00 4c 8d 75 03 bf 3d
[ 80.682785][ T5231] RSP: 0018:ffffc90009257288 EFLAGS: 00010213
[ 80.688863][ T5231] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000
[ 80.696867][ T5231] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff88802ebf41f8
[ 80.704880][ T5231] RBP: 0000000000000014 R08: ffff88802ebf420f R09: 1ffff11005d7e841
[ 80.712888][ T5231] R10: dffffc0000000000 R11: ffffed1005d7e842 R12: 0000000000000003
[ 80.720867][ T5231] R13: 0000000000000002 R14: 0000000000000002 R15: ffff88802ebf41f8
[ 80.728886][ T5231] FS: 000055556c297380(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[ 80.737848][ T5231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 80.744470][ T5231] CR2: 00007f20b8995ed8 CR3: 000000007757a000 CR4: 0000000000350ef0
[ 80.752477][ T5231] Kernel panic - not syncing: Fatal exception
[ 80.758752][ T5231] Kernel Offset: disabled
[ 80.763067][ T5231] Rebooting in 86400 seconds..